Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/ea8ae3ee-7a13-379c-a42e-7118ec41768e.roa
File:                     ea8ae3ee-7a13-379c-a42e-7118ec41768e.roa (raw, json)
Hash identifier:          WdJ6Um54STCrb7rueaMa1gcKEE3Jnt7tIwmBBiGbpt8=
Subject key identifier:   30:81:E1:0A:FC:A4:E8:51:47:A4:16:31:E2:11:08:3B:E8:11:FD:0C
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F43285848A830AE523C0A7F75E7E53340
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/ea8ae3ee-7a13-379c-a42e-7118ec41768e.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     39618
IP address blocks:        2602:fd92:b00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:ae:52:3c:0a:7f:75:e7:e5:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=35dc0836-3d99-4b77-ad7d-3fa8796dd3a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ec:fe:95:f2:74:f0:0a:f2:03:aa:f0:9a:48:
                    0a:6a:d2:2c:e1:1e:93:23:e7:21:47:ee:7c:a9:71:
                    42:11:1c:2c:b3:e3:32:2c:9d:f0:ad:94:1f:95:4e:
                    40:62:8e:37:46:46:31:c5:f0:cc:8b:44:9b:73:51:
                    9f:17:c4:d4:8b:d8:6d:84:93:bb:3a:fa:dc:38:f3:
                    db:a2:9c:f0:f0:46:82:7e:f4:06:dc:f4:b6:f0:af:
                    62:6e:87:fc:54:42:b7:cd:9c:db:20:a8:97:8b:bf:
                    f2:78:41:5b:bc:13:c6:86:36:6d:25:3e:05:3c:56:
                    6d:74:a9:d5:ff:b9:ce:96:2a:b7:81:ad:64:e3:fd:
                    e1:c3:80:ce:63:97:13:3c:6e:ea:88:90:fb:00:46:
                    b2:ae:4f:18:00:2f:1a:7a:59:7d:5f:8a:df:78:b4:
                    63:87:0f:8e:71:f3:56:45:d2:3f:e0:fa:75:90:1d:
                    05:41:8d:96:ab:38:db:33:52:2c:3e:7f:90:07:c3:
                    54:de:e2:38:0d:e3:54:01:cd:b2:22:3d:6d:00:1d:
                    03:bd:b4:c7:5d:be:8f:e0:ac:e9:4f:5d:e5:e3:fa:
                    a4:01:5f:1d:1b:8c:7f:e6:ca:ee:4d:55:28:80:a4:
                    d9:bf:4d:7d:21:be:2b:76:01:cc:cf:53:39:c0:91:
                    68:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:81:E1:0A:FC:A4:E8:51:47:A4:16:31:E2:11:08:3B:E8:11:FD:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/ea8ae3ee-7a13-379c-a42e-7118ec41768e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:b00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:a1:76:fe:e6:eb:92:32:20:47:ae:0b:2d:9e:20:5d:19:8c:
         bd:c7:9d:37:8f:cb:64:20:33:dc:3a:7a:3c:ca:c1:f1:6d:b8:
         57:f3:03:31:90:5f:b1:56:10:d8:10:7f:d0:8f:3b:4b:ed:de:
         24:15:8a:f5:db:d6:1f:3d:5c:95:98:2d:1b:5a:2e:d2:d9:c3:
         cf:fd:71:c5:54:bf:f1:8a:6d:98:1f:ec:12:47:e0:8b:71:00:
         c8:b5:27:50:c2:50:27:ad:37:55:7f:e6:67:b6:a7:f1:c5:2b:
         b3:a9:89:75:d0:e2:43:86:94:e4:e1:5b:83:85:ae:68:3c:c4:
         d3:df:93:74:b1:bd:a7:71:36:31:c0:54:8a:d2:c9:16:bc:83:
         06:be:30:94:a2:52:c3:49:a0:3f:e1:b5:cd:f6:28:41:a2:bf:
         a7:4d:26:67:33:41:2c:27:bb:c2:2c:78:6e:ea:8a:b4:71:9c:
         f2:7e:db:8f:0f:2f:a0:37:b2:7f:72:44:da:64:88:47:57:19:
         83:2d:b4:97:40:62:ef:6b:a8:18:c4:5a:75:54:8a:73:63:b1:
         4d:86:c0:a1:1f:54:ff:00:21:8e:34:d3:cb:b3:17:61:29:2f:
         52:f5:c1:35:ed:73:8e:b9:30:a8:6e:d8:47:b7:c6:4a:40:e0:
         62:48:21:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----